{"id":"CVE-2020-21528","aliases":["BELL-CVE-2020-21528","DEBIAN-CVE-2020-21528","EUVD-2020-14296","GHSA-hfwj-q2m5-23m2","JLSEC-2026-200","OESA-2023-1626","UBUNTU-CVE-2020-21528"],"status":"published","title":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03...","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0054,"percentile":0.4574,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-08-22T00:00:00Z","modified":"2026-10-26T12:01:43Z","fixes":[{"ecosystem":"Alpaquita:23","package":"nasm","fixed_in":["2.16.01-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nasm","fixed_in":["2.16.01-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nasm","fixed_in":["2.16.01-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nasm","fixed_in":["2.16.01-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nasm","fixed_in":["2.16.01-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"NASM_jll","fixed_in":["2.16.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"nasm","fixed_in":["2.15.03-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"nasm","fixed_in":["2.15.03-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"nasm","fixed_in":["2.15.05-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"nasm","fixed_in":["2.15.05-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"nasm","fixed_in":["2.15.05-6.oe2203sp2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.05-r1"},{"fixed":"2.16.01-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.05-r1"},{"fixed":"2.16.01-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.01-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.01-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.01-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"NASM_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.16.1+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.03-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.03-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.05-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.05-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.05-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.02-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"nasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.15.05-1","2.15.05-1ubuntu0.1~esm1","2.15.05-1ubuntu0.1~esm2"]}],"products":[{"vendor":"nasm","product":"netwide_assembler"}],"references":[{"url":"https://bugzilla.nasm.us/show_bug.cgi?id=3392637","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://security.gentoo.org/glsa/202312-09","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-21528","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hfwj-q2m5-23m2"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-21528","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-21528","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1626","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-21528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-21528","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-21528","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-08-04T14:30:33.246Z","updated_at":"2026-11-02T14:35:48.854892Z"}],"euvd":[{"id":"EUVD-2020-14296","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-08-04T14:30:33Z","updated_at":"2026-11-03T03:07:23.734565Z"}],"ghsa":[{"id":"GHSA-hfwj-q2m5-23m2","title":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03...","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T21:30:25Z","modified":"2023-12-22T15:30:28Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:55:16.323735Z"}],"nvd":[{"id":"CVE-2020-21528","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T19:16:13.803Z","modified":"2026-06-17T03:03:45.563Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"BELL-CVE-2020-21528","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-01-26T09:37:48.237005Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-21528","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T19:16:13.803Z","modified":"2026-10-24T10:30:46.443780935Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"DEBIAN-CVE-2020-21528","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T19:16:13.803Z","modified":"2026-10-26T12:01:43.482851749Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"JLSEC-2026-200","description":"A Segmentation Fault issue discovered in in `ieee_segment` function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2026-04-27T13:45:07.015Z","modified":"2026-07-25T18:24:05.488808383Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2023-1626","title":"nasm security update","description":"NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump.\r\n\r\nSecurity Fix(es):\r\n\r\nA Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.(CVE-2020-21528)","status":"published","published":"2023-09-15T11:06:04Z","modified":"2026-08-18T01:17:01.476368197Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2020-21528","description":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-05-20T16:04:15.024851979Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.905183Z"}]}}